8. Identify Application Security Issues Related to Secret Protection, Encryption (storage and Transport), and Data Handling 200-901 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An application collects user data for analytics. The data includes full names, email addresses, and IP addresses. The application only needs to report aggregate counts by city. What is the best data handling practice?

   • AStore the raw data in a separate database with stricter access controls
   • BAnonymize the names and email addresses but keep IP addresses
   • CEncrypt the full dataset and store it for future analysis
   • DCollect only the city and the count, and discard the raw data after aggregation
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   An application stores user data in a database. The data is classified as 'confidential' and must be retained for 7 years for compliance. After 7 years, the data must be securely deleted. What is the best approach?

   • AOverwrite the database files with zeros after 7 years
   • BMove the data to an archive and keep it indefinitely
   • CEncrypt the data and securely delete the encryption keys after the retention period
   • DDelete the rows from the database after 7 years
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A network automation application uses REST APIs to manage devices. The application must comply with a policy that requires all data in transit to be encrypted. The current implementation uses HTTP for some endpoints because they are internal. What is the best action?

   • AEnable TLS on all endpoints and redirect HTTP traffic to HTTPS
   • BUse a VPN for all internal traffic
   • CEncrypt the payloads with AES before sending over HTTP
   • DUse HTTP for internal endpoints and HTTPS for external endpoints
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company stores customer PII in a database that is backed up to an on-premises tape library. The database is encrypted with Transparent Data Encryption (TDE). What additional measure is most important to protect the backup tapes?

   • ACompress the backup tapes to reduce storage space
   • BUse a different database encryption key for each tape
   • CStore the tapes in a locked cabinet
   • DEncrypt the backup tapes with a separate encryption solution
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A developer stores a database password in a plaintext config file that is committed to a private Git repository. The application connects to the database over the corporate network. Which two actions best reduce the risk of credential exposure and data interception?

   • AEncrypt the config file with a hard-coded key and rely on the private repository for access control.
   • BRotate the password monthly and keep it in the config file for simplicity.
   • CMove the password to an environment variable and enable TLS for database connections.
   • DUse a secrets manager and disable TLS because the traffic stays on the corporate network.
   Reveal Solution Discussion Select an answer first